{"id":173383,"date":"2025-12-31T08:05:00","date_gmt":"2025-12-31T13:05:00","guid":{"rendered":"https:\/\/testing.news-you-need.com\/index.php\/2025\/12\/31\/cybersecurity-experts-running-ransomware-heres-how-they-netted-1-2m-in-bitcoin\/"},"modified":"2025-12-31T10:50:10","modified_gmt":"2025-12-31T15:50:10","slug":"cybersecurity-experts-running-ransomware-heres-how-they-netted-1-2m-in-bitcoin","status":"publish","type":"post","link":"https:\/\/testing.news-you-need.com\/index.php\/2025\/12\/31\/cybersecurity-experts-running-ransomware-heres-how-they-netted-1-2m-in-bitcoin\/","title":{"rendered":"Cybersecurity Experts Running Ransomware? Here’s How They Netted $1.2M in Bitcoin"},"content":{"rendered":"

Cybersecurity Experts Running Ransomware? Here’s How They Netted $1.2M in Bitcoin<\/a><\/p>\n

https:\/\/knowtechie.com\/blackcat-ransomware-cybercrime-insiders\/<\/a><\/p>\n

Publish Date: 2025-12-31 08:05:00<\/a><\/p>\n

Source Domain: knowtechie.com<\/a><\/p>\n

Author: <\/a><\/p>\n

Using an unordered list, summarize the following article with between 4 and 8 key points.
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tJust a heads up, if you buy something through our links, we may get a small share of the sale. It\u2019s one of the ways we keep the lights on here. Click here for more.
\nTwo former cybersecurity professionals have admitted they were secretly running ransomware attacks on the side.\u00a0<\/p>\n

According to an announcement this week from the US Department of Justice, Ryan Goldberg, 40, and Kevin Martin, 36, pleaded guilty to orchestrating a string of ransomware attacks in 2023 that netted them about $1.2 million in Bitcoin.<\/p>\n

Here\u2019s the part that makes security teams everywhere groan into their coffee: one of the defendants was literally a ransomware negotiator.\u00a0<\/p>\n

Martin and an unnamed co-conspirator worked at Digital Mint, a company that helps organizations survive ransomware attacks.\u00a0<\/p>\n

Goldberg, meanwhile, was an incident response manager at Sygnia Cybersecurity Services. Their day jobs involved cleaning up cybercrime. Their alleged night job was committing it.<\/p>\n

The trio used the infamous ALPHV \/ BlackCat ransomware, encrypting victims\u2019 systems and stealing data before demanding massive payouts.\u00a0<\/p>\n

BlackCat operates like a startup accelerator for hackers: the developers build and maintain the malware, while affiliates do the dirty work and share the profits.\u00a0<\/p>\n

It\u2019s ransomware, but with revenue sharing.<\/p>\n

Ironically, 2023 was also the year the Federal Bureau of Investigation rolled out a decryption tool designed to help victims recover data locked up by BlackCat, a move that likely made life much harder for criminals relying on it.<\/p>\n

Prosecutors say the group targeted a wide range of victims across the US, including a medical device company, a pharmaceutical firm, a doctor\u2019s office, an engineering company, and even a drone manufacturer.\u00a0<\/p>\n

In one case, they successfully extorted $1.2 million, proving that insider knowledge is, unfortunately, very valuable.<\/p>\n

\u201cThese defendants used their sophisticated cybersecurity training to commit the very crimes they were supposed to prevent,\u201d the DOJ said, in what may be the understatement of the year.<\/p>\n

Goldberg and Martin pleaded guilty to conspiracy to extort, a charge that carries a maximum sentence of 20 years in prison.\u00a0(Via: The Verge) <\/p>\n

They\u2019ll find out their fate on March 12th, 2026, plenty of time for the cybersecurity industry to quietly update its trust issues.<\/p>\n

Follow us on Flipboard, Google News, or Apple News<\/p>\n

\t\t\t\t\t\t\t\t\t\t\t\tRonil is a Computer Engineer by education and a consumer technology writer by choice. Over the course of his professional career, his work has appeared in reputable publications like MakeUseOf, TechJunkie, GreenBot, and many more. When not working, you\u2019ll find him at the gym breaking a new PR.<\/p>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Cybersecurity Experts Running Ransomware? Here’s How They Netted $1.2M in Bitcoin https:\/\/knowtechie.com\/blackcat-ransomware-cybercrime-insiders\/ Publish Date: 2025-12-31…<\/p>\n","protected":false},"author":1,"featured_media":173384,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/knowtechie.com\/wp-content\/uploads\/2021\/06\/ransomware-hacker-1000x600.jpg","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[24,32],"class_list":["post-173383","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-cybersecurity","tag-malware"],"_links":{"self":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/173383"}],"collection":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=173383"}],"version-history":[{"count":1,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/173383\/revisions"}],"predecessor-version":[{"id":173385,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/173383\/revisions\/173385"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/173384"}],"wp:attachment":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=173383"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=173383"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=173383"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}